[openstack-dev] [Barbican] Use of Dogtag for Production Backend

Simo Sorce simo at redhat.com
Fri May 3 16:20:50 UTC 2013


On Fri, 2013-05-03 at 14:09 +0000, Jarret Raim wrote:
> On 5/3/13 8:44 AM, "Clark, Robert Graham" <robert.clark at hp.com> wrote:
> 
> >From a personal point of view I've always found Dogtag to be a pain to
> >install on any non Redhat system. EJBCA offers some cross over and is
> >significantly easier to deploy. That said, I think the overall approach
> >makes a lot of sense. I'll be watching with interest.
> 
> Thanks for the feedback. I'll add EJBCA to our list to investigate. I've
> also gotten some feedback from our ops folks that they aren't particularly
> happy about having to run 389, but we'll see if there is any fire under
> all the smoke :)
> 
> >Seeing as RH has thrown so much effort into OpenStack already, I guess
> >Dogtag makes a lot of sense. Looking forward to seeing where this goes.
> >Once the blueprint is done I'd be prepared to throw some effort into
> >documenting how to deploy a reference implementation on a debian-type
> >system.
> 
> That's awesome, thanks. We'll have to get everything working on at least
> Cent, RHEL, Debian and Ubuntu so if there are install difficulties, that's
> something we can work with the RedHat guys about. They've been super
> helpful so far.

On the Red Hat side we are working on making sure DogTag 10 will be
installable on Debian/Ubuntu soon, currently they miss some packages for
RestEasy which is used to implement the RESTful API.

Simo.


-- 
Simo Sorce * Red Hat, Inc * New York




More information about the OpenStack-dev mailing list